Server Got Hacked

This guy on my server who builds really cool stuff and has built stuff for me. But now he knows some amazing plugin developers who found a way to make it so he can op himself on my server. I don't want him to be able to do that, but if I ban him he will just ddos my server. What should i do?

 

Say no, Let him DDoS all he wants, he doesn't seem like the kind of guy you would want on your server anyways.

 

Umm what is ddos anyways?

 

Distributed Denial of Service. Aka, they are trying to kill your router.

 

1. Immediately make a backup.

2. Are you sure it's a plugin? Any version of Bukkit made before yesterday has a login exploit that allows people to log in as anyone. Immediately update to the latest recommended build.

3. If the guy's threatening you, ban him. You don't want him on your server.

 

Thanks for the advice everyone. I banned him but he has taken down the server a couple times so not working great, but I am sure he will get tired of it

 

Here is the thing. People who dDos will not do it for long. They will get tired of doing it eventually and stop doing it to you. They will move on. Just wait it out.

 

Lol, ask him what DDOS is and say he has 30 second to answers if he fails to answer he doesn't know how to do it

 

He actually knows what he is talking about and I have seen him take down many servers so it's a little more severe then you think. Well it seems he might be giving up for a little as I now have the server running

 

Lol, and yet you keep him on your server? and are you hosting your server from home?

 

Bobcat00 There was a exploit that allows you to login as anyone? Dammn.

 

No i banned him. And I have it hosted by a company not from my home

 

Alright, good if you do get ddos I believe they try to target the server, or your internet.. and if you get ddos, contact your server provider or wireless provider, DDoS is not allowed.

 

A DDoS is strictly illegal, contact your internet provider or your host IMMEDIATLY! Track the hacker's ip and give it to the companies! they might get him arrested

 

Do what the others say: backup .
AND: Ensure you have the latest CraftBukkit RB running, also check the permission files and possibly other plugins configurations for "corruption", in terms of unwanted entries.

 

The script I am linking you to is very well known and pretty useful: http://deflate.medialayer.com/

Be aware, a decent sized botnet cannot be stopped. The poor script will be so busy trying to block them all that it will end up consuming the majority of CPU cycles itself, however it is a proven script and will happily weed out any lesser attacks.